b59bf90cfa5262b504d3e1f648103283_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59bf90cfa5262b504d3e1f648103283_JaffaCakes118
Size

4KB
MD5

b59bf90cfa5262b504d3e1f648103283
SHA1

c366d70e764f0b53a5d0756282bbd18a4ed1a17d
SHA256

c62336eab4236952dad95ebe43ae3c40d41f02e2eeedc8eb11e2a29cbc0594bc
SHA512

7a22af320569857e1193484e6064a7f253724cc007641f40a254c7637de0ef7303ee3edb9a6f3a39bded9fba2397c68fbce63ac90106f3c01ac354eb4e4946ea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59bf90cfa5262b504d3e1f648103283_JaffaCakes118

Files

b59bf90cfa5262b504d3e1f648103283_JaffaCakes118
.exe windows:1 windows x86 arch:x86

104e3844f7d26941e527c62603133eee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE